Hi, guys i m facing a weird problem, while pulling the logs from my data source using McAfee agent i have noticed my agent service goes down every time the log rotation happens at the source.

This result in halting of log forwarding toward the SIEM collector( ERC ). First i tried writing a crone to restart the service but the issue is that there is no specific time at which log rotation happens and thus no specific time the crone should run.